DisableSecurityBypass

Prevent the user from bypassing security in certain cases.

When Firefox blocks a page because of a bad certificate or Safe Browsing detection, the warning includes a bypass method. This is an Accept the Risk and Continue button on the certificate error page, and an ignore the risk link on the blocked site page. This policy removes the bypasses, so the user cannot reach the page from inside Firefox.

These policies only affect what happens when an error is shown, they do not affect any settings in preferences. To change what gets blocked, use Preferences to set the relevant browser.safebrowsing.* preferences.

If Firefox rejects a certificate that your organization needs to trust, add it with the Certificates policy instead.

Compatibility

Firefox	Firefox ESR	Firefox Enterprise
Available since 60	Available since 60	Available since 149

CCK2 Equivalent: N/A
OMA-URI: DisableSecurityBypass
Preferences Affected: security.certerror.hideAddException, browser.safebrowsing.allowOverride

Examples

{
  "policies": {
    "DisableSecurityBypass": {
      "InvalidCertificate": true,
      "SafeBrowsing": true
    }
  }
}

JSON schema

{
  "type": "object",
  "properties": {
    "InvalidCertificate": {
      "type": "boolean"
    },
    "SafeBrowsing": {
      "type": "boolean"
    }
  }
}

Values

InvalidCertificate: Prevents adding an exception when an invalid certificate is shown.
SafeBrowsing: Prevents selecting "ignore the risk" and visiting a harmful site anyway. Also hide the Unblock button in the Downloads panel for downloads that Safe Browsing has flagged, so a blocked download can only be deleted, not kept.

Windows (GPO)

Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0

macOS

<dict>
  <key>DisableSecurityBypass</key>
  <dict>
    <key>InvalidCertificate</key>
    <true/> | <false/>
    <key>SafeBrowsing</key>
    <true/> | <false/>
  </dict>
</dict>